Mailing-List: contact users-help@tomcat.apache.org; run by ezmlm
Precedence: bulk
Reply-To: "Tomcat Users List" <users@tomcat.apache.org>
Received-SPF: pass (nike.apache.org: domain of mgainty@hotmail.com designates
 65.55.111.80 as permitted sender)
Message-ID: <BLU142-W90B3ECEB22769A1DED19BAE4E0@phx.gbl>
Content-Type: multipart/alternative;
	boundary="_7ebc60b2-dada-48ff-b29e-43a301ec0c66_"
From: Martin Gainty <mgainty@hotmail.com>
To: Tomcat Users List <users@tomcat.apache.org>
Subject: RE: Malicious host is crashing my server
Date: Sun, 7 Nov 2010 12:57:58 -0500
Importance: Normal
In-Reply-To: 
 <99C8B2929B39C24493377AC7A121E21F99F892D730@USEA-EXCH8.na.uis.unisys.com>
References: 
 <745267.95902.qm@web54409.mail.re2.yahoo.com>,<99C8B2929B39C24493377AC7A121E21F99F892D730@USEA-EXCH8.na.uis.unisys.com>
MIME-Version: 1.0

--_7ebc60b2-dada-48ff-b29e-43a301ec0c66_
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable


the culprit will change IPs

are you implementing SSL?
are you encrypting your data before putting on the wire?

Martin=20
______________________________________________=20
Verzicht und Vertraulichkeitanmerkung/Note de d=E9ni et de confidentialit=
=E9

Diese Nachricht ist vertraulich. Sollten Sie nicht der vorgesehene Empfaeng=
er sein=2C so bitten wir hoeflich um eine Mitteilung. Jede unbefugte Weiter=
leitung oder Fertigung einer Kopie ist unzulaessig. Diese Nachricht dient l=
ediglich dem Austausch von Informationen und entfaltet keine rechtliche Bin=
dungswirkung. Aufgrund der leichten Manipulierbarkeit von E-Mails koennen w=
ir keine Haftung fuer den Inhalt uebernehmen.
Ce message est confidentiel et peut =EAtre privil=E9gi=E9. Si vous n'=EAtes=
 pas le destinataire pr=E9vu=2C nous te demandons avec bont=E9 que pour sat=
isfaire informez l'exp=E9diteur. N'importe quelle diffusion non autoris=E9e=
 ou la copie de ceci est interdite. Ce message sert =E0 l'information seule=
ment et n'aura pas n'importe quel effet l=E9galement obligatoire. =C9tant d=
onn=E9 que les email peuvent facilement =EAtre sujets =E0 la manipulation=
=2C nous ne pouvons accepter aucune responsabilit=E9 pour le contenu fourni=
.


=20

> From: Chuck.Caldarale@unisys.com
> To: users@tomcat.apache.org
> Date: Sun=2C 7 Nov 2010 11:48:20 -0600
> Subject: RE: Malicious host is crashing my server
>=20
> > From: Assaf [mailto:assafn@yahoo.com]=20
> > Subject: Malicious host is crashing my server
>=20
> > what can I do to better protect?
>=20
> As a temporary preventive measure=2C you can disable access from this par=
ticular IP address by configuring the RemoteAddrValve in server.xml:
>=20
> <Valve className=3D"org.apache.catalina.valves.RemoteAddrValve" deny=3D"7=
9\.177\.23\.102"/>
>=20
> That should give you some time to work out the real fix.
>=20
> - Chuck
>=20
>=20
> THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY =
MATERIAL and is thus for use only by the intended recipient. If you receive=
d this in error=2C please contact the sender and delete the e-mail and its =
attachments from all computers.
>=20
>=20
> ---------------------------------------------------------------------
> To unsubscribe=2C e-mail: users-unsubscribe@tomcat.apache.org
> For additional commands=2C e-mail: users-help@tomcat.apache.org
>=20
 		 	   		  =

--_7ebc60b2-dada-48ff-b29e-43a301ec0c66_--